Users were complaining about incomplete searches, recent emails missing from the search.  The users are on a terminal server not using cached mode, so they are relying on the mail server index.

I saw that the content index state was failed.  I stopped the services, removed the index and allowed to rebuild.

The previous index was 3.7GB.  After two days the index is only 95MB and search results are only showing the last two days.

My DB size is 107GB so I'm expecting it to be al ot larger than that.

I have already restarted the search services.

Content Index State shows healthy.  Not sure where to go from here.

I'm using a single Exchange server 2013 with CU7.

• Edited by Dynamic Computer 17 hours 51 minutes ago

Hi ,

Does the same behavior is happening for all the DB'S ?

There is only one DB.  Small law office, only 25 users.

Hi ,

Please have a look in to the Microsoft exchange fast search events on the application logs .Most of the time event logs might lead us to go in a proper path for troubleshooting.

I was just looking at that when I saw your reply come in.  This is what I found, although from the time stamp, it may have been when I was restarting the search services.

An operation attempted against a FAST endpoint exprienced an exception. This operation may be retried. Error details: Microsoft.Exchange.Search.Fast.PerformingFastOperationException: An Exception was received during a FAST operation. ---> System.ServiceModel.CommunicationException: The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by the remote host, or an underlying network resource issue. Local socket timeout was '00:01:00'. ---> System.IO.IOException: The write operation failed, see inner exception. ---> System.ServiceModel.CommunicationException: The socket connection was aborted. This could be caused by an error processing your message or a receive timeout being exceeded by the remote host, or an underlying network resource issue. Local socket timeout was '00:01:00'. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.Socket.Send(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
   at System.ServiceModel.Channels.SocketConnection.Write(Byte[] buffer, Int32 offset, Int32 size, Boolean immediate, TimeSpan timeout)

Also I found this

The indexing of mailbox database Mailbox Database 2123847568 encountered an unexpected exception. Error details: Microsoft.Exchange.Search.Core.Abstraction.OperationFailedException: The component operation has failed. ---> Microsoft.Exchange.Search.Core.Abstraction.OperationFailedException: The component operation has failed. ---> Microsoft.Exchange.Search.Fast.FastTransientDocumentException: The Content Submission Service returned failure for the document: The Content Submission Service returned failure for the document: Item operation failed after 0 retries
.. ---> Microsoft.Exchange.Search.Fast.FastTransientDocumentException: The Content Submission Service returned failure for the document: Item operation failed after 0 retries

Hi ,

Have you visited the below mentioned link ?

https://support.microsoft.com/kb/2807668?wa=wsignin1.0

I looked at the article you linked.

I created the group but am unable to do the following: granting administrators and network service part of the group.

To resolve the issue, do the following:

1. Create a new Active Directory group that is named "ContentSubmitters" and then grant Admistrators and NetworkService full access to the group. This is a dummy group and should be used as a placeholder only. You might want to add a description so that the group is not removed.
2. Force or wait for Active Directory replication.
3. Restart the following services:
   • Microsoft Exchange Search
   • Microsoft Exchange Search Host Controller

Hi ,

Just have the newly created group in the below mentioned scope and type.

Group type and scope : Security enabled Universal group

Once it is done just follow rest of the procedures as per the mentioned article.

I'm not sure what I'm doing wrong

I'm assuming I am to make the "administrators" group and "network service" a member of this group.

There is no administrators group, I can add domain admins.

I cannot add network service, name not found

Hi ,

You need to add and provide full access for administrators and networkservice on the security tab of the ContentSubmitters group .

Ok, I was able to do that.  

Still getting Event 1010's relating to System.IO.IOException.

System.servicemodel.communicationexception: the socket connection was aborted.

An existing connection was forcibly closed by the remote host.

Hi ,

Please check the below mentioned link.

https://social.technet.microsoft.com/Forums/windows/en-US/a99ecd8a-31a5-4908-a87c-7895e98f525c/both-dag-indexes-for-a-database-failed?forum=exchangesvradmin

In your case you need to follow the first 6 steps.